Once the download is complete, the hackers can access everything stored in the users' web browser, including saved passwords and financial information.
As well as scams there are hoaxes. There's one doing the rounds right now talking about Facebook's privacy policy. Facebook users are copying and pasting the following into their status:
"Better safe than sorry. As of October 13, 2013 at 4:41am Eastern standard time, I do not give Facebook or any entities associated with Facebook permission to use my pictures, information, or posts, both past and future.
"By this statement, I give notice to Facebook it is strictly forbidden to disclose, copy, distribute, or take any other action against me based on this profile and/or its contents. The content of this profile is private and confidential information. The violation of privacy can be punished by law (UCC 1-308- 1 1 308-103 and the Rome Statute). NOTE: Facebook is now a public entity. All members must post a note like this. If you prefer, you can copy and paste this version. If you do not publish a statement at least once it will be tactically allowing the use of your photos, as well as the information contained in the profile status updates. DO NOT SHARE. You MUST copy and Paste."
Bad news guys, when you signed up to Facebook you agreed to the terms and conditions, including the clause that they are subject to change.
A status isn't going to give you rights over the company.
A status will get lost on your page never to be seen again.
There are two options, keep your profile locked down as best as possible, or don't use Facebook. Take responsibility for yourself.
Use the privacy controls and account settings built in to the platform and be sensible about what information you post online in the first place.